KESTROVA | Solidity Security Analysis

Privacy Policy

Last updated: [not yet set]. Controller: [not yet set], [not yet set]. Contact: [not yet set].

Your code

  • Your code is sent over HTTPS and written to a temporary folder only for the scan. The folder is deleted when the scan finishes.
  • Your code is never written to our logs or database. Scan results (which quote short excerpts of your code) are kept in server memory for up to one hour so the same code is not analysed twice.
  • If you choose "Continue in Phantom", "Solflare" or "Trust Wallet" on a phone, your code is held in server memory for at most 10 minutes so the wallet app can pick it up once, then deleted.
  • When you buy a report, your code stays in your browser until the report is delivered. The report (which quotes short excerpts of your code), a hash of each file, the order ID and the transaction ID are stored in our database so you can download the report again. Your source code itself is not stored.

IP addresses and logs

  • To enforce free-scan and payment limits, IP addresses are kept in server memory only, for up to 24 hours, never on disk.
  • Our usage log records the page or API route, the response status and the type of client, not your code or IP address.

Payments

  • Kestrova never asks for your seed phrase or private key. Your wallet signs the payment. We see your public wallet address and the payment transaction, which are public on Solana and cannot be deleted from it.
  • If your wallet only signs (and does not send) transactions, your browser submits the signed payment directly to a public Solana node (solana-rpc.publicnode.com), which sees your IP address and the public transaction.

Service providers

Render (hosting), Cloudflare (network and security in front of the site), Neon (payment-record database) and Solana RPC providers (PublicNode, Helius; reading public blockchain data). They process data only to provide their service and may keep their own standard request logs.

Retention and your rights

Payment records and purchased reports are kept as long as needed to let you download your report again and to meet accounting obligations. Kestrova sets no cookies and uses no advertising or tracking. Your browser stores your unfinished or purchased report locally (local storage) so you can resume it; clearing site data removes it. You can ask for access to or deletion of data we hold about you at [not yet set]; on-chain payment data cannot be deleted by anyone. Do not paste private keys, passwords or code you are not allowed to share.